Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page.
References
Link | Resource |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 | Patch Third Party Advisory US Government Resource |
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 | Patch Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:37
Type | Values Removed | Values Added |
---|---|---|
References | () https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 - Patch, Third Party Advisory, US Government Resource |
Information
Published : 2015-10-28 10:59
Updated : 2024-11-21 02:37
NVD link : CVE-2015-7900
Mitre link : CVE-2015-7900
CVE.ORG link : CVE-2015-7900
JSON object : View
Products Affected
infinite_automation_systems
- mango_automation
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor